Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority MEDIUM 44

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00561 Published 2026-07-02 Fixed in 4.2.29 CWE-22
Priority MEDIUM 42

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00524 Published 2026-07-02 Fixed in 4.2.29 CWE-284
Priority MEDIUM 46

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01628 Published 2026-07-02 Fixed in 4.2.29 CWE-20